maemo.org - Talk - How To get forgotten lock code from locked device

maemo.org - Talk (https://talk.maemo.org/index.php)

- General (https://talk.maemo.org/forumdisplay.php?f=7)

- - How To get forgotten lock code from locked device (https://talk.maemo.org/showthread.php?t=80590)

How To get forgotten lock code from locked device

Hey,

i have to post this, because there is no post like this in the internet i know so far.

This instructions are helpful if you have changed your lock code from 12345, forgotten it and then locked it.
You dont have to flash it and you can keep all your data.

It worked for me with on archlinux. If your using windows or something else the instructions may be helpful.

1. Get shell access to and on your phone
This is the hard part, because it is not supported by default.
The idea is to start the flasher and give him another kernelimage to boot.

You have to download the following files:
nin101.uni.cx/N900/rescueOS/rescueOS-initrd-0.5.img.new
nin101.uni.cx/N900/rescueOS/2.6.37
(I saw it and use it because of this post: talk.maemo.org/showpost.php?p=1077983&postcount=18)

Also you have to download the flasher software and install libusb 32bit.
tablets-dev.nokia.com/maemo-dev-env-downloads.php

Then to the following:
(listed here: wiki.meego.com/ARM/N900/Using_Rescue_Initrd)

Remove the back cover
Turn off your device by removing battery
Insert the battery back to the device
Put back cover to the device (This is not needed if you don't need to have access to the microsd card, or if you use magnet instead).
Start flasher with the following:

PHP Code:


		
			
sudo ./flasher-3.5 -k 2.6.37 -n rescueOS-initrd-0.5.img.new -l -b"rootdelay root=/dev/ram0"

If it works your getting an terminal access on your phone.
Successful output will look like this:

PHP Code:


		
			
[lukas@PC-INF-LH2 maemo_flasher-3.5_2.5.2.2]$ sudo ./flasher-3.5 -k 2.6.37 -n rescueOS-initrd-0.5.img.new -l -b"rootdelay root=/dev/ram0"

flasher v2.5.2 (Oct 21 2009)



USB device found found at bus 004, device address 056.

Found device RX-51, hardware revision 2204

NOLO version 1.4.14

Version of 'sw-release': RX-51_2009SE_20.2010.36-2_PR_MR0

Sending kernel image (1901 kB)...

100% (1901 of 1901 kB, avg. 38032 kB/s)

Sending initfs image (12096 kB)...

100% (12096 of 12096 kB, avg. 37565 kB/s)

Using kernel command line: "rootdelay root=/dev/ram0"

2. Use this access
This video youtube.com/watch?v=vVE4tjPpWG4 tells you this:
when you are in the terminal type:

PHP Code:


		
			
cat /dev/mtd1 | grep -A 13 lock_code | tail -1

If you cant type this "|" type the following and take the last line

PHP Code:


		
			
grep -A 13 lock_code /dev/mtd1

this outputs e.q. "9vJ3.d85nKD0w"
save "root:OUTPUT:" to a file named "tmpfile" then type

PHP Code:


		
			
john -format:DES -i:digits tmpfile

After some time the output is: YOUR LOCK CODE!

so have fun ;)

ps: sorry for the bad formatted links, im not allowed to post links as a new user.